REMARKS 

Reconsideration of the present application is requested. Claims 1-36 are 
pending. 

Applicants acknowledge the re-opening of prosecution in view of the Pre- 
Appeal Brief Conference Request filed September 6, 2007. 

REJECTION UNDER 35 U.S.C. § 102 

The Examiner rejects claims 1-36 under 35 U.S.C. § 102(b) as allegedly 
anticipated by U.S. Patent Application Publication No. 2001/0027527, 
hereinafter referred to as the '527 publication. This rejection is respectfully 
traversed. 

Claim 1 requires, inter alia, "signing an access operation to electronic 
data by specifying the user signature and the role signature" This feature is not 
disclosed or suggested by the '527 publication. 

Referring to FIGS. 1 and 4 of the '527 publication, a user submits 
his/her credentials as part of a request for access to information on a secure 
server 36. In response, the secure server 36 sends an authentication query to 
authentication server 12. The authentication server 12 authenticates the 
user's credentials and stores a time-stamped record of the authentication. 

Once authenticated, the authentication server 12 sends a token 90 
including an encryption portion 94 to the secure server 36. The encrypted 
portion 94 includes the user's login name and the identification of the secure 
server 36. 
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The token 90 also includes information enabling the secure server 12 to 
apply business rules to the particular user. For example, the token 90 
includes an identification of a user group to which the particular user belongs. 
A list of applicable business rules can be forwarded to the user 40 to indicate 
to the user the types of access and actions the user is permitted to take with 
respect to storing files. 

Assuming the user is permitted to take a desired action, the user must 
re-submit his credentials so that he/she can be re-authenticated 78 prior to 
completion of the transaction. A record of the re-authentication is stored in the 
database 24. 

The Examiner relies upon the token 90 and the business rules described 
in paragraph 39 of the '527 publication to allegedly teach the "user signature," 
and the "role signature," of claim 1. But, access by the user are not signed by 
specifying the token 90 and the business rules. To the contrary, the system of 
the '527 publication tracks user access by maintaining records of each 
authentication. See paragraph [0041]. As the Examiner will appreciate, the 
authentication refers to the user's credentials, which include, for example, 
biometric information submitted by the user. The user's credentials are not 
the token 90 or the business rules. 

Accordingly, even assuming arguendo that the token 90 and the business 
rules disclosed by the '527 publication could even arguably be considered the 
similar to the "user signature," and the "role signature," of claim 1, respectively 
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(which Applicants do not admit), access by the user is not signed by specifying 
the token 90 or the business rules. Thus, the '527 publication does not 
disclose or fairly suggest at least, "signing an access operation to electronic data 
by specifying the user signature and the role signature" as required by claim 1. 

For at least the foregoing reasons, claim 1 is patentable over the '527 
publication. Claims 2-8 and 16-22 are patentable over the '527 publication at 
least by virtue of their dependency from claim 1. Independent claims 9 and 29 
are patentable over the '527 publication for at least reasons somewhat similar 
to those set forth above with regard to claim 1. Claims 10-15, 23-28, and 30- 
36 are patentable over the '527 publication at least by virtue of their 
dependency from claims 9 or 29. 

CONCLUSION 

Accordingly, in view of the above amendments and remarks, 
reconsideration of the objections and rejections and allowance of each of claims 
1-36 in connection with the present application is earnestly solicited. 

If the Examiner believes that personal communication will expedite 
prosecution of this application, the Examiner is invited to telephone Andrew M. 
Waxman, Reg. No. 56,007, at the number of the undersigned listed below. 
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If necessary, the Commissioner is hereby authorized in this, concurrent, 
and future replies to charge payment or credit any overpayment to Deposit 
Account No. 08-0750 for any additional fees required under 37 C.F.R. §§1.16 
or 1.17; particularly, extension of time fees. 

Respectfully submitted, 



HARNESS, DICKEY & PIERCE, PLC 




DJD/AMW:krm 

P.O. Box 8910 
Reston, VA 20195 
(703) 668-8000 
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